CVE-2008-0244

Currently unrated

Key Information:

Vendor
SAP
Status
Maxdb
Vendor
CVE Published:
12 January 2008

Summary

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.

References

http://secunia.com/advisories/28409
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/486039/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2008/0104
vdb-entryx_refsource_VUPEN

EPSS Score

95% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.